>
    Strata Copilot
    Ports Used for Clustering
    Focus
    Download PDF
    Focus
    1. Home
    2. Next-Generation Firewall
    3. Firewall Administration
    4. Reference: Port Number Usage
    5. Ports Used for Clustering
    Download PDF
    Next-Generation Firewall

    Ports Used for Clustering

    Table of Contents

    Ports Used for Clustering

    TCP/UDP ports used by Palo Alto Networks firewalls and Panorama for clustering communication.
    The firewall and Panorama use the following ports for clustering.
    Destination Port
    Protocol
    Description
    5404–5406
    UDP
    Used for Corosync (HSCI port communication).
    28829
    TCP
    Used for C3 cluster streaming proxy service, low latency (HSCI port communication).
    28830
    TCP
    Used for C3 cluster streaming proxy service, normal latency (HSCI port communication).
    28840
    TCP
    Used to listen for the management port heartbeat.
    Hyperscale security fabric (HSF) uses the following ports for clustering.
    Destination Port
    Protocol
    Description
    28884
    UDP
    Used over the HSCI interface for CI keepalive.
    28885
    UDP
    Used to listen to the management interface heartbeat messages among cluster nodes.
    29284
    UDP
    		TI interface for cluster traffic keepalives
    28832
    TCP
    Used for C3 cluster secure streaming proxy service.

    © 2026 Palo Alto Networks, Inc. All rights reserved.